Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CRIFvxapIVdBoV3UjA0QzVFTnwA.roa
File: CRIFvxapIVdBoV3UjA0QzVFTnwA.roa (raw, json)
Hash identifier: 7L/vVGOxopncEIhv/HCycIAnn6NJwJs1A9uKMwPvVWs=
Subject key identifier: 09:12:05:BF:16:A9:21:57:41:A1:5D:D4:8C:0D:10:CD:51:53:9F:00
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0188074656680B2122F98A2CD25F0FEEFF26
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CRIFvxapIVdBoV3UjA0QzVFTnwA.roa
Signing time: Wed 10 May 2023 20:07:10 +0000
ROA not before: Wed 10 May 2023 20:07:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 109.72.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 09:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:46:56:68:0b:21:22:f9:8a:2c:d2:5f:0f:ee:ff:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 10 20:07:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=091205bf16a9215741a15dd48c0d10cd51539f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:e0:cb:9a:28:fb:bf:ae:82:49:60:bf:38:
c4:02:82:e2:e1:e4:67:ce:cc:2d:0f:10:7d:29:78:
df:fd:eb:b7:a0:b4:38:7f:0a:70:95:2e:b4:c2:bf:
fd:9a:7d:3f:8f:50:4d:ab:4f:22:26:59:dc:ac:52:
2c:ff:b8:6f:2b:08:cd:76:2d:f8:04:7b:c9:d8:74:
67:92:6b:6f:d6:45:6a:ad:e7:56:d6:0a:92:f0:05:
b8:6e:33:20:4c:a2:e6:18:95:76:4f:57:3e:a0:d0:
e7:4f:0d:e9:eb:9a:1a:d7:8a:76:65:da:05:e0:8e:
73:37:3c:c8:69:d9:97:71:e0:e0:54:2c:02:e0:a8:
e3:85:a7:88:b9:a7:bf:02:d8:c3:a1:be:aa:f6:cc:
d6:e7:e0:59:9a:42:c7:68:6b:5b:56:17:f6:15:c0:
e1:b5:af:d1:6a:af:23:1e:65:ef:77:bf:50:3d:1c:
89:1b:5e:d5:f2:a4:91:b6:65:fa:b1:29:13:f9:db:
bf:61:0f:db:1b:e9:96:f0:c5:d1:49:b7:4e:aa:38:
34:cc:3a:d3:46:81:60:01:db:e8:c0:d5:03:b1:12:
5b:2e:20:09:18:67:76:48:af:73:3f:4d:8e:e7:4f:
7e:31:3c:6e:02:c1:3b:ad:f8:75:e3:3f:7c:85:a0:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:12:05:BF:16:A9:21:57:41:A1:5D:D4:8C:0D:10:CD:51:53:9F:00
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/CRIFvxapIVdBoV3UjA0QzVFTnwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c4:d6:f0:8f:10:ad:68:26:00:42:ab:f2:e0:35:29:cb:5a:
f7:af:3d:58:b0:ad:2a:68:e8:aa:d9:aa:e1:49:45:67:0b:36:
74:63:2b:79:be:dc:0e:46:ad:37:16:ca:7e:5d:9e:42:37:78:
13:b1:7a:b8:5d:eb:c9:31:61:ad:80:41:45:f4:cf:04:53:38:
fa:f2:15:69:56:9e:d1:26:e5:14:37:02:21:ba:62:79:33:b2:
b1:77:2b:9c:5b:cf:7f:95:c7:d6:75:a7:d4:f0:eb:50:6a:f0:
86:a1:f3:70:7d:15:e2:fb:f2:96:30:e5:5a:31:c3:15:79:8e:
7f:8e:e3:4f:14:2b:33:ce:6b:91:3b:1f:af:fe:0a:3d:57:e3:
c1:48:43:63:38:56:0e:ec:52:ff:7f:c1:c0:d5:26:dc:37:6b:
e4:fa:a9:f3:ed:b2:3e:2a:a2:92:50:e1:c9:ae:f6:ea:00:f8:
2c:a9:e6:ee:68:f3:7b:e2:a1:9a:b3:37:b5:01:8a:63:c0:fa:
ed:d0:18:dc:f7:bc:07:92:46:f4:9e:37:08:27:43:3c:c0:86:
3e:04:db:60:99:81:1c:4b:e6:8f:a3:47:73:0d:ae:e9:c6:a9:
54:70:18:9e:a5:aa:2e:a0:58:a9:04:f9:4c:43:7e:cd:b8:33:
7e:2c:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org